This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json) Hash identifier: gk27zEMdwyZasc8xx08SnTEdr1i4S20w69G1F63usuQ= Subject key identifier: 1A:39:8F:A0:6B:BB:A5:0A:A5:0E:5B:83:80:4F:8E:57:EF:7F:2A:72 Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc Certificate serial: 019B2FD4ED8B3EBE3081FACF740EA11E7E0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft Manifest number: 0C16 Signing time: Thu 18 Dec 2025 05:00:42 +0000 Manifest this update: Thu 18 Dec 2025 05:00:42 +0000 Manifest next update: Fri 19 Dec 2025 05:00:42 +0000 Files and hashes: 1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=) 2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: Kq2yJTqfje3u6lipY8mDWuegA2hsyIWdqN5NAk/X6VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:ed:8b:3e:be:30:81:fa:cf:74:0e:a1:1e:7e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc Validity Not Before: Dec 18 05:00:42 2025 GMT Not After : Dec 19 05:00:42 2025 GMT Subject: CN=1a398fa06bbba50aa50e5b83804f8e57ef7f2a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:15:3d:a4:ff:86:06:35:28:5a:88:ba:24: f9:cc:7d:10:17:62:eb:82:9f:d7:32:a9:fd:3c:94: 61:55:cc:80:13:f6:0c:28:bd:f0:7d:69:c9:96:6a: 14:4b:72:30:7f:c5:a3:7b:93:06:47:5e:3c:2a:86: 01:dc:13:bd:0a:43:c6:87:05:44:9b:b1:b4:74:ed: 07:c4:8b:d4:bb:94:37:c0:61:56:57:dc:7e:6e:db: 26:79:6a:d7:bc:63:c7:ba:aa:a2:4d:df:6d:cb:ff: 62:a1:bb:7b:c1:55:c0:ef:19:09:89:d0:d1:91:45: 5e:26:45:6d:62:2d:21:b8:8a:b9:0a:34:f1:82:2a: bd:f5:5f:b0:a4:3d:71:c9:dd:3c:1b:52:22:da:36: 76:df:b5:6e:ef:4b:df:cd:75:69:d7:c8:dc:30:e1: 49:fa:87:10:07:f0:2c:55:45:bc:93:b5:bb:29:13: 93:95:c2:9a:ba:54:88:9d:77:d7:08:2c:f6:28:06: 59:f2:2c:b9:a1:24:81:a6:1d:a4:cf:ed:a5:0e:7c: 6a:61:ff:78:05:d6:d7:51:93:d8:34:10:08:91:27: ad:6a:56:3f:4a:b2:77:84:3f:f6:5e:08:86:a2:dc: 90:98:62:28:a7:11:fc:05:d7:e1:79:00:b6:6b:8c: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:39:8F:A0:6B:BB:A5:0A:A5:0E:5B:83:80:4F:8E:57:EF:7F:2A:72 X509v3 Authority Key Identifier: keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:d5:1a:b1:da:52:6b:3c:12:36:12:00:cb:9d:a2:71:82: 74:de:e8:ca:7f:c4:87:d3:fb:49:e9:1e:11:7d:7f:d2:f1:f1: 2f:6e:6d:50:88:51:dc:f5:90:12:24:56:30:d4:6c:2e:c0:d0: f7:05:d7:93:25:1d:bd:fe:f8:45:8e:e1:97:c2:f3:6e:f7:88: e0:3d:b1:11:26:df:25:73:75:06:b9:2f:db:20:46:9f:87:ad: 44:ef:84:df:4c:d4:1e:35:bc:51:5a:66:56:c9:66:5b:6b:b8: 0f:0a:b7:a8:db:f2:cd:84:08:d4:67:51:a7:70:99:85:6b:15: 90:54:d7:07:1f:d4:5c:8b:e8:6a:bc:14:dd:50:7b:57:2c:d4: 94:42:1f:c3:57:70:cf:80:fb:f0:3b:02:4e:62:d3:52:68:34: 7e:7e:9f:1d:da:1d:f3:ab:3a:c3:fe:8b:93:57:26:0c:54:80: b2:1e:6a:58:65:a1:b2:8d:21:73:89:64:a8:25:4f:98:dd:a6: 2c:20:e3:91:81:4b:d5:37:4f:83:3c:70:d3:f8:4b:ef:07:d5: 5d:76:d4:56:9b:be:6b:51:f9:e0:3b:38:17:00:18:3f:c7:ca: c9:2f:23:03:df:54:21:38:10:46:ed:4c:2b:07:40:33:e8:58: 01:7e:92:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1O2LPr4wgfrPdA6hHn4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh MDNlY2MwHhcNMjUxMjE4MDUwMDQyWhcNMjUxMjE5MDUwMDQyWjAzMTEwLwYDVQQD EygxYTM5OGZhMDZiYmJhNTBhYTUwZTViODM4MDRmOGU1N2VmN2YyYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWAVPaT/hgY1KFqIuiT5zH0QF2Lr gp/XMqn9PJRhVcyAE/YMKL3wfWnJlmoUS3Iwf8Wje5MGR148KoYB3BO9CkPGhwVE m7G0dO0HxIvUu5Q3wGFWV9x+btsmeWrXvGPHuqqiTd9ty/9iobt7wVXA7xkJidDR kUVeJkVtYi0huIq5CjTxgiq99V+wpD1xyd08G1Ii2jZ237Vu70vfzXVp18jcMOFJ +ocQB/AsVUW8k7W7KROTlcKaulSInXfXCCz2KAZZ8iy5oSSBph2kz+2lDnxqYf94 BdbXUZPYNBAIkSetalY/SrJ3hD/2XgiGotyQmGIopxH8BdfheQC2a4xeqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo5j6Bru6UKpQ5bg4BPjlfvfypyMB8GA1UdIwQY MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt Mjc0Y2Q2Y2FhM2YzLzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBPVGrHa Ums8EjYSAMudonGCdN7oyn/Eh9P7SekeEX1/0vHxL25tUIhR3PWQEiRWMNRsLsDQ 9wXXkyUdvf74RY7hl8LzbveI4D2xESbfJXN1Brkv2yBGn4etRO+E30zUHjW8UVpm VslmW2u4Dwq3qNvyzYQI1GdRp3CZhWsVkFTXBx/UXIvoarwU3VB7VyzUlEIfw1dw z4D78DsCTmLTUmg0fn6fHdod86s6w/6Lk1cmDFSAsh5qWGWhso0hc4lkqCVPmN2m LCDjkYFL1TdPgzxw0/hL7wfVXXbUVpu+a1H54Ds4FwAYP8fKyS8jA99UITgQRu1M KwdAM+hYAX6SBA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:20:15 2025 by rpki-client